Lucene search
HistoryMay 07, 2009 - 11:30 p.m.
CVE-2009-1582
cve-2009-1582
million dollar text links
admin access
security vulnerability
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.1 High
AI Score
Confidence
Low
0.046 Low
EPSS
Percentile
92.6%
Million Dollar Text Links 1.0 does not properly restrict administrator access to admin.home.php, which allows remote attackers to bypass intended restrictions and gain privileges via a direct request to admin.home.php after visiting admin.php.
Affected configurations
Node
kalptarudemosmillion_dollar_text_linksMatch1.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| kalptarudemos:million_dollar_text_links | kalptarudemos million dollar text links | eq | 1.0 |
Related
prion
prion
Design/Logic Flaw
2009-05-07 23:30:00
cvelist
cvelist
CVE-2009-1582
2009-05-07 23:00:00
nvd
nvd
CVE-2009-1582
2009-05-07 23:30:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.1 High
AI Score
Confidence
Low
0.046 Low
EPSS
Percentile
92.6%
Related for CVE-2009-1582